@valon-technologies/gestalt 0.0.1-alpha.37 → 0.0.1-alpha.38

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@valon-technologies/gestalt",
-  "version": "0.0.1-alpha.37",
+  "version": "0.0.1-alpha.38",
   "description": "TypeScript SDK for Gestalt executable providers",
   "type": "module",
   "repository": {

package/src/agent-access.ts

@@ -48,7 +48,6 @@ import {
   ENV_HOST_SERVICE_SOCKET,
   ENV_HOST_SERVICE_TOKEN,
 } from "./host-service.ts";
-import { hostInvocationContext } from "./invocation-context.ts";
 
 export interface AgentWorkspaceGitCheckout {
   url?: string | undefined;
@@ -168,12 +167,11 @@ export interface Agent {
  */
 class AgentImpl implements Agent {
   private readonly client: Client<typeof AgentProviderService>;
-  private readonly invocationContext: ReturnType<typeof hostInvocationContext>;
+  private readonly context: Request["__requestContext"];
 
   constructor(request: Request);
-  constructor(invocationToken: string);
-  constructor(requestOrToken: Request | string) {
-    this.invocationContext = hostInvocationContext(requestOrToken);
+  constructor(request: Request) {
+    this.context = request.__requestContext;
 
     const target = process.env[ENV_HOST_SERVICE_SOCKET]?.trim();
     if (!target) {
@@ -200,7 +198,7 @@ class AgentImpl implements Agent {
         clientRef: request.clientRef ?? "",
         metadata: optionalStruct(request.metadata),
         idempotencyKey: request.idempotencyKey ?? "",
-        ...this.invocationContext,
+        context: this.context,
         workspace: workspaceToProto(request.workspace),
       }),
     );
@@ -211,7 +209,7 @@ class AgentImpl implements Agent {
     return agentSessionFromProto(
       await this.client.getSession({
         sessionId: request.sessionId,
-        ...this.invocationContext,
+        context: this.context,
       }),
     );
   }
@@ -222,7 +220,7 @@ class AgentImpl implements Agent {
   ): Promise<AgentSession[]> {
     const response = await this.client.listSessions({
       providerName: request.providerName ?? "",
-      ...this.invocationContext,
+      context: this.context,
       state: request.state ?? AgentSessionState.UNSPECIFIED,
       limit: request.limit ?? 0,
       summaryOnly: request.summaryOnly ?? false,
@@ -240,7 +238,7 @@ class AgentImpl implements Agent {
         clientRef: request.clientRef ?? "",
         state: request.state ?? AgentSessionState.UNSPECIFIED,
         metadata: optionalStruct(request.metadata),
-        ...this.invocationContext,
+        context: this.context,
       }),
     );
   }
@@ -261,7 +259,7 @@ class AgentImpl implements Agent {
         output: agentOutputToProto(request.output),
         metadata: optionalStruct(request.metadata),
         idempotencyKey: request.idempotencyKey ?? "",
-        ...this.invocationContext,
+        context: this.context,
         modelOptions: optionalStruct(request.modelOptions),
         timeoutSeconds,
       }),
@@ -273,7 +271,7 @@ class AgentImpl implements Agent {
     return agentTurnFromProto(
       await this.client.getTurn({
         turnId: request.turnId,
-        ...this.invocationContext,
+        context: this.context,
       }),
     );
   }
@@ -282,7 +280,7 @@ class AgentImpl implements Agent {
   async listTurns(request: AgentListTurns): Promise<AgentTurn[]> {
     const response = await this.client.listTurns({
       sessionId: request.sessionId,
-      ...this.invocationContext,
+      context: this.context,
       status: request.status ?? AgentExecutionStatus.UNSPECIFIED,
       limit: request.limit ?? 0,
       summaryOnly: request.summaryOnly ?? false,
@@ -296,7 +294,7 @@ class AgentImpl implements Agent {
       await this.client.cancelTurn({
         turnId: request.turnId,
         reason: request.reason ?? "",
-        ...this.invocationContext,
+        context: this.context,
       }),
     );
   }
@@ -309,7 +307,7 @@ class AgentImpl implements Agent {
       turnId: request.turnId,
       afterSeq: BigInt(request.afterSeq ?? 0),
       limit: request.limit ?? 0,
-      ...this.invocationContext,
+      context: this.context,
     });
     return response.events.map(agentTurnEventFromProto);
   }
@@ -320,7 +318,7 @@ class AgentImpl implements Agent {
   ): Promise<AgentInteraction[]> {
     const response = await this.client.listInteractions({
       turnId: request.turnId,
-      ...this.invocationContext,
+      context: this.context,
     });
     return response.interactions.map(agentInteractionFromProto);
   }
@@ -334,7 +332,7 @@ class AgentImpl implements Agent {
         turnId: request.turnId,
         interactionId: request.interactionId,
         resolution: optionalStruct(request.resolution),
-        ...this.invocationContext,
+        context: this.context,
       }),
     );
   }

package/src/agent-conversions.ts

@@ -273,6 +273,7 @@ export function agentToolRefFromProto(ref: ProtoAgentToolRef): AgentToolRef {
     instance: ref.instance,
     title: ref.title,
     description: ref.description,
+    credentialMode: ref.credentialMode,
     system: ref.system,
     runAs: agentRunAsSubjectFromProto(ref.runAs),
   };
@@ -286,6 +287,7 @@ export function agentToolRefToProto(ref: AgentToolRef): ProtoAgentToolRef {
     instance: ref.instance ?? "",
     title: ref.title ?? "",
     description: ref.description ?? "",
+    credentialMode: ref.credentialMode ?? "",
     system: ref.system ?? "",
     runAs: agentRunAsSubjectToProto(ref.runAs),
   });

package/src/agent.ts

@@ -208,6 +208,7 @@ export interface AgentToolRef {
   instance?: string | undefined;
   title?: string | undefined;
   description?: string | undefined;
+  credentialMode?: string | undefined;
   system?: string | undefined;
   runAs?: SubjectInput | undefined;
 }
@@ -277,7 +278,6 @@ export interface CreateAgentProviderSessionRequest {
   metadata?: JsonObjectInput | undefined;
   createdBySubjectId?: string | undefined;
   subject?: Subject | undefined;
-  invocationToken: string;
   context?: ProtoRequestContext | undefined;
   sessionStart?: AgentSessionStartConfig | undefined;
   preparedWorkspace?: AgentPreparedWorkspace | undefined;
@@ -286,14 +286,12 @@ export interface CreateAgentProviderSessionRequest {
 export interface GetAgentProviderSessionRequest {
   sessionId: string;
   subject?: Subject | undefined;
-  invocationToken: string;
   context?: ProtoRequestContext | undefined;
 }
 
 export interface ListAgentProviderSessionsRequest {
   providerName?: string | undefined;
   subject?: Subject | undefined;
-  invocationToken: string;
   context?: ProtoRequestContext | undefined;
   sessionIds: readonly string[];
   state: AgentSessionState;
@@ -311,7 +309,6 @@ export interface UpdateAgentProviderSessionRequest {
   state: AgentSessionState;
   metadata?: JsonObjectInput | undefined;
   subject?: Subject | undefined;
-  invocationToken: string;
   context?: ProtoRequestContext | undefined;
 }
 
@@ -370,8 +367,6 @@ export interface CreateAgentProviderTurnRequest {
   toolSource: AgentToolSourceMode;
   subject?: Subject | undefined;
   modelOptions?: JsonObjectInput | undefined;
-  runGrant: string;
-  invocationToken: string;
   context?: ProtoRequestContext | undefined;
   timeoutSeconds: number;
 }
@@ -390,14 +385,12 @@ export type AgentOutput =
 export interface GetAgentProviderTurnRequest {
   turnId: string;
   subject?: Subject | undefined;
-  invocationToken: string;
   context?: ProtoRequestContext | undefined;
 }
 
 export interface ListAgentProviderTurnsRequest {
   sessionId: string;
   subject?: Subject | undefined;
-  invocationToken: string;
   context?: ProtoRequestContext | undefined;
   turnIds: readonly string[];
   status: AgentExecutionStatus;
@@ -413,7 +406,6 @@ export interface CancelAgentProviderTurnRequest {
   turnId: string;
   reason: string;
   subject?: Subject | undefined;
-  invocationToken: string;
   context?: ProtoRequestContext | undefined;
 }
 
@@ -434,7 +426,6 @@ export interface ListAgentProviderTurnEventsRequest {
   afterSeq: bigint;
   limit: number;
   subject?: Subject | undefined;
-  invocationToken: string;
   context?: ProtoRequestContext | undefined;
 }
 
@@ -459,14 +450,12 @@ export interface AgentInteraction {
 export interface GetAgentProviderInteractionRequest {
   interactionId: string;
   subject?: Subject | undefined;
-  invocationToken: string;
   context?: ProtoRequestContext | undefined;
 }
 
 export interface ListAgentProviderInteractionsRequest {
   turnId: string;
   subject?: Subject | undefined;
-  invocationToken: string;
   context?: ProtoRequestContext | undefined;
 }
 
@@ -479,7 +468,6 @@ export interface ResolveAgentProviderInteractionRequest {
   interactionId: string;
   resolution?: JsonObjectInput | undefined;
   subject?: Subject | undefined;
-  invocationToken: string;
   context?: ProtoRequestContext | undefined;
 }
 
@@ -492,7 +480,6 @@ export interface ExecuteAgentToolRequest {
   toolId: string;
   arguments?: JsonObjectInput | undefined;
   idempotencyKey?: string | undefined;
-  runGrant?: string | undefined;
   context?: ProtoRequestContext | undefined;
 }
 
@@ -527,7 +514,6 @@ export interface ListAgentToolsRequest {
   pageSize?: number | undefined;
   pageToken?: string | undefined;
   query?: string | undefined;
-  runGrant?: string | undefined;
   context?: ProtoRequestContext | undefined;
 }
 
@@ -541,7 +527,6 @@ export interface ResolveAgentConnectionRequest {
   turnId: string;
   connection: string;
   instance?: string | undefined;
-  runGrant?: string | undefined;
   context?: ProtoRequestContext | undefined;
 }
 
@@ -561,7 +546,6 @@ export interface AgentHostListToolsInput {
   pageSize?: number | undefined;
   pageToken?: string | undefined;
   query?: string | undefined;
-  runGrant?: string | undefined;
   context?: ProtoRequestContext | undefined;
 }
 
@@ -573,7 +557,6 @@ export interface AgentHostExecuteToolInput {
   toolId: string;
   arguments?: JsonObjectInput | undefined;
   idempotencyKey?: string | undefined;
-  runGrant?: string | undefined;
   context?: ProtoRequestContext | undefined;
 }
 
@@ -583,7 +566,6 @@ export interface AgentHostResolveConnectionInput {
   turnId: string;
   connection: string;
   instance?: string | undefined;
-  runGrant?: string | undefined;
   context?: ProtoRequestContext | undefined;
 }
 
@@ -832,7 +814,6 @@ function createAgentProviderSessionRequestFromProto(
     metadata: optionalObjectFromStruct(request.metadata),
     createdBySubjectId: request.createdBySubjectId ?? "",
     subject: agentRequestSubjectFromProto(request),
-    invocationToken: request.invocationToken,
     context: request.context,
     sessionStart: request.sessionStart === undefined ? undefined : {
       hooks: request.sessionStart.hooks.map((hook) => ({
@@ -861,7 +842,6 @@ function getAgentProviderSessionRequestFromProto(
   return {
     sessionId: request.sessionId,
     subject: agentRequestSubjectFromProto(request),
-    invocationToken: request.invocationToken,
     context: request.context,
   };
 }
@@ -872,7 +852,6 @@ function listAgentProviderSessionsRequestFromProto(
   return {
     providerName: request.providerName,
     subject: agentRequestSubjectFromProto(request),
-    invocationToken: request.invocationToken,
     context: request.context,
     sessionIds: [...request.sessionIds],
     state: request.state as AgentSessionState,
@@ -890,7 +869,6 @@ function updateAgentProviderSessionRequestFromProto(
     state: request.state as AgentSessionState,
     metadata: optionalObjectFromStruct(request.metadata),
     subject: agentRequestSubjectFromProto(request),
-    invocationToken: request.invocationToken,
     context: request.context,
   };
 }
@@ -928,8 +906,6 @@ function createAgentProviderTurnRequestFromProto(
     toolSource: request.toolSource as AgentToolSourceMode,
     subject: agentRequestSubjectFromProto(request),
     modelOptions: optionalObjectFromStruct(request.modelOptions),
-    runGrant: request.runGrant,
-    invocationToken: request.invocationToken,
     context: request.context,
     timeoutSeconds: request.timeoutSeconds,
   };
@@ -941,7 +917,6 @@ function getAgentProviderTurnRequestFromProto(
   return {
     turnId: request.turnId,
     subject: agentRequestSubjectFromProto(request),
-    invocationToken: request.invocationToken,
     context: request.context,
   };
 }
@@ -952,7 +927,6 @@ function listAgentProviderTurnsRequestFromProto(
   return {
     sessionId: request.sessionId,
     subject: agentRequestSubjectFromProto(request),
-    invocationToken: request.invocationToken,
     context: request.context,
     turnIds: [...request.turnIds],
     status: request.status as AgentExecutionStatus,
@@ -968,7 +942,6 @@ function cancelAgentProviderTurnRequestFromProto(
     turnId: request.turnId,
     reason: request.reason,
     subject: agentRequestSubjectFromProto(request),
-    invocationToken: request.invocationToken,
     context: request.context,
   };
 }
@@ -981,7 +954,6 @@ function listAgentProviderTurnEventsRequestFromProto(
     afterSeq: request.afterSeq,
     limit: request.limit,
     subject: agentRequestSubjectFromProto(request),
-    invocationToken: request.invocationToken,
     context: request.context,
   };
 }
@@ -992,7 +964,6 @@ function getAgentProviderInteractionRequestFromProto(
   return {
     interactionId: request.interactionId,
     subject: agentRequestSubjectFromProto(request),
-    invocationToken: request.invocationToken,
     context: request.context,
   };
 }
@@ -1003,7 +974,6 @@ function listAgentProviderInteractionsRequestFromProto(
   return {
     turnId: request.turnId,
     subject: agentRequestSubjectFromProto(request),
-    invocationToken: request.invocationToken,
     context: request.context,
   };
 }
@@ -1016,7 +986,6 @@ function resolveAgentProviderInteractionRequestFromProto(
     interactionId: request.interactionId,
     resolution: optionalObjectFromStruct(request.resolution),
     subject: agentRequestSubjectFromProto(request),
-    invocationToken: request.invocationToken,
     context: request.context,
   };
 }
@@ -1164,7 +1133,6 @@ function executeToolRequestToProto(
     toolId: request.toolId,
     arguments: optionalStruct(request.arguments),
     idempotencyKey: request.idempotencyKey ?? "",
-    runGrant: request.runGrant ?? "",
     context: request.context,
   });
 }
@@ -1185,7 +1153,6 @@ function listToolsRequestToProto(request: ListAgentToolsRequest): ProtoListAgent
     pageSize: request.pageSize ?? 0,
     pageToken: request.pageToken ?? "",
     query: request.query ?? "",
-    runGrant: request.runGrant ?? "",
     context: request.context,
   });
 }
@@ -1227,7 +1194,6 @@ function resolveConnectionRequestToProto(
     turnId: request.turnId,
     connection: request.connection,
     instance: request.instance ?? "",
-    runGrant: request.runGrant ?? "",
     context: request.context,
   });
 }
@@ -1299,7 +1265,6 @@ class AgentHostImpl implements AgentHost {
         toolId: input.toolId,
         arguments: input.arguments,
         idempotencyKey: input.idempotencyKey ?? "",
-        runGrant: input.runGrant ?? "",
         context: input.context,
       },
     );
@@ -1325,7 +1290,6 @@ class AgentHostImpl implements AgentHost {
         pageSize: input.pageSize ?? 0,
         pageToken: input.pageToken ?? "",
         query: input.query ?? "",
-        runGrant: input.runGrant ?? "",
         context: input.context,
       },
     );
@@ -1350,7 +1314,6 @@ class AgentHostImpl implements AgentHost {
         turnId: input.turnId,
         connection: input.connection,
         instance: input.instance ?? "",
-        runGrant: input.runGrant ?? "",
         context: input.context,
       },
     );

package/src/api.ts

@@ -74,7 +74,6 @@ export interface Request {
   workflow: Record<string, unknown>;
   toolRefs: AgentToolRef[];
   toolRefsSet: boolean;
-  invocationToken: string;
   __requestContext?: ProtoRequestContext | undefined;
 }
 
@@ -168,7 +167,6 @@ export function request(
   credential: Partial<Credential> = {},
   access: Partial<Access> = {},
   workflow: Record<string, unknown> = {},
-  invocationToken = "",
   idempotencyKey = "",
   host: Partial<Host> = {},
   agentSubject: Partial<Subject> = {},
@@ -222,7 +220,6 @@ export function request(
     host: {
       publicBaseUrl: host.publicBaseUrl ?? "",
     },
-    invocationToken,
     __requestContext: requestContext,
     idempotencyKey: idempotencyKey.trim(),
   };

package/src/app-access.ts

@@ -8,7 +8,6 @@ import {
   structFromObject,
   type JsonObjectInput,
 } from "./protocol.ts";
-import { hostInvocationContext } from "./invocation-context.ts";
 import {
   createHostServiceGrpcTransport,
   hostServiceMetadataInterceptors,
@@ -28,18 +27,6 @@ export interface AppInvokeOptions {
   credentialMode?: ConnectionMode;
 }
 
-/** Grant included when exchanging an invocation token for a child token. */
-export interface AppInvocationGrant {
-  /** App name that the child token may invoke. */
-  app: string;
-  /** Specific operation ids allowed by the child token. */
-  operations?: string[];
-  /** Surface names allowed by the child token. */
-  surfaces?: string[];
-  /** Whether the child token may invoke every operation on the app. */
-  allOperations?: boolean;
-}
-
 /** Options for invoking an app GraphQL surface. */
 export interface AppGraphQLInvokeOptions
   extends Pick<AppInvokeOptions, "connection" | "instance" | "idempotencyKey"> {
@@ -60,27 +47,21 @@ export interface App {
     document: string,
     options?: AppGraphQLInvokeOptions,
   ): Promise<OperationResult>;
-  exchangeInvocationToken(options?: {
-    grants?: AppInvocationGrant[];
-    ttlSeconds?: number;
-  }): Promise<string>;
 }
 
 /**
  * Transport-backed implementation for invoking sibling app operations.
  *
- * The constructor accepts either a Gestalt request or an invocation token. A
- * request forwards both its host request context and legacy invocation token
- * when available.
+ * The constructor accepts a Gestalt request and forwards its host request
+ * context to every operation and GraphQL request.
  */
 class AppImpl implements App {
   private readonly client: Client<typeof AppService>;
-  private readonly invocationContext: ReturnType<typeof hostInvocationContext>;
+  private readonly request: Request;
 
   constructor(request: Request);
-  constructor(invocationToken: string);
-  constructor(requestOrToken: Request | string) {
-    this.invocationContext = hostInvocationContext(requestOrToken);
+  constructor(request: Request) {
+    this.request = request;
 
     const { target, token } = requireHostServiceTarget("app");
     const transport = createHostServiceGrpcTransport(
@@ -98,7 +79,6 @@ class AppImpl implements App {
     options?: AppInvokeOptions,
   ): Promise<OperationResult> {
     const response = await this.client.invoke({
-      ...this.invocationContext,
       app,
       operation,
       params: structFromObject(params),
@@ -106,6 +86,7 @@ class AppImpl implements App {
       instance: options?.instance ?? "",
       idempotencyKey: options?.idempotencyKey?.trim() ?? "",
       credentialMode: options?.credentialMode?.trim() ?? "",
+      context: this.request.__requestContext,
     });
     return {
       status: response.status,
@@ -126,8 +107,6 @@ class AppImpl implements App {
     }
 
     const response = await this.client.invokeGraphQL({
-      invocationToken: this.invocationContext.invocationToken,
-      context: this.invocationContext.context,
       app,
       document: trimmedDocument,
       ...(options?.variables !== undefined
@@ -136,6 +115,7 @@ class AppImpl implements App {
       connection: options?.connection ?? "",
       instance: options?.instance ?? "",
       idempotencyKey: options?.idempotencyKey?.trim() ?? "",
+      context: this.request.__requestContext,
     });
     return {
       status: response.status,
@@ -144,31 +124,6 @@ class AppImpl implements App {
     };
   }
 
-  /** Exchanges this invocation token for a narrower child token. */
-  async exchangeInvocationToken(options?: {
-    /** Grants to attach to the child token. */
-    grants?: AppInvocationGrant[];
-    /** Requested child-token time-to-live in seconds. */
-    ttlSeconds?: number;
-  }): Promise<string> {
-    const response = await this.client.exchangeInvocationToken({
-      parentInvocationToken: this.invocationContext.invocationToken,
-      grants: (options?.grants ?? [])
-        .map((grant) => ({
-          app: grant.app.trim(),
-          operations: (grant.operations ?? [])
-            .map((operation) => operation.trim())
-            .filter(Boolean),
-          surfaces: (grant.surfaces ?? [])
-            .map((surface) => surface.trim().toLowerCase())
-            .filter(Boolean),
-          allOperations: grant.allOperations ?? false,
-        }))
-        .filter((grant) => grant.app.length > 0),
-      ttlSeconds: BigInt(Math.max(0, options?.ttlSeconds ?? 0)),
-    });
-    return response.invocationToken;
-  }
 }
 
 export const App = AppImpl;

package/src/index.ts

@@ -78,7 +78,6 @@ export {
 } from "./build.ts";
 export {
   App,
-  type AppInvocationGrant,
   type AppGraphQLInvokeOptions,
   type AppInvokeOptions,
 } from "./app-access.ts";